+        case DESCKIND_TYPECOMP:
+            ITypeComp_Release(bindptr.lptcomp);
+            break;
+        default:
+            break;
+        }
+        return CTL_E_ILLEGALFUNCTIONCALL;

You leak typeinfo here.

Thanks,

Jacek